Ask for help about NoScript, no registration needed to post
m_c
Junior Member
Posts: 24 Joined: Mon Aug 24, 2009 11:53 am
Post
by m_c » Thu Dec 17, 2009 1:35 am
There are several more apps on facebook which creates an xss error. Sometimes reload works, sometimes not. (in mafiawars it could that I lose some gifts
)
Is facebook still secured for xss attacks if I do this:
lllbob wrote: ...
I Fixed it by doing this:
A : Go to
Noscript Options .
B : Click the
Advanced tab .
C : Click the
XSS tab .
D : Add these entries to the Exceptions. Right below the stumbleupon entry.
http://mwfb.static.zynga.com
http://www.facebook.com
E: Click
Ok ...
Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 GTB6 (.NET CLR 3.5.30729)
Giorgio Maone
Site Admin
Posts: 9524 Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:
Post
by Giorgio Maone » Thu Dec 17, 2009 4:38 pm
m_c wrote: Is facebook still secured for xss attacks if I do this:
No, it's not.
Exceptions should be more specific than these.
I could help if I can see the specific warnings you get.
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 (.NET CLR 3.5.30729)
m_c
Junior Member
Posts: 24 Joined: Mon Aug 24, 2009 11:53 am
Post
by m_c » Thu Dec 17, 2009 6:46 pm
I don't know what exactly you need.
First 3 quotes are console entries, fourth one is screenshot of the "alert" window.
I noticed that xss menu entries on browser window's top are changed every time I open the menu. Bug?
First click ,
second click .
Using Firefox 3.5.6, NoScript 1.9.9.25
Last edited by
m_c on Sun Aug 15, 2010 2:52 pm, edited 2 times in total.
Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 GTB6 (.NET CLR 3.5.30729)
m_c
Junior Member
Posts: 24 Joined: Mon Aug 24, 2009 11:53 am
Post
by m_c » Thu Dec 17, 2009 10:34 pm
Mafiawars seems to be fixed.
Thx
Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 GTB6 (.NET CLR 3.5.30729)
Giorgio Maone
Site Admin
Posts: 9524 Joined: Wed Mar 18, 2009 11:22 pm
Location: Palermo - Italy
Contact:
Post
by Giorgio Maone » Thu Dec 17, 2009 10:40 pm
m_c wrote: Mafiawars seems to be fixed.
Thx
In
1.9.9.26 you mean, right?
Mozilla/5.0 (Windows; U; Windows NT 5.2; en-US; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 (.NET CLR 3.5.30729)
m_c
Junior Member
Posts: 24 Joined: Mon Aug 24, 2009 11:53 am
Post
by m_c » Thu Dec 17, 2009 11:00 pm
Giorgio Maone wrote: ...In
1.9.9.26 you mean, right?
Yes, in lastest version of NoScript.
Now I'm unable to test for this strange xss menu entry thing anymore.
Mozilla/5.0 (Windows; U; Windows NT 6.0; de; rv:1.9.1.6) Gecko/20091201 Firefox/3.5.6 GTB6 (.NET CLR 3.5.30729)